merlint: add E520 (lib/ convention) and E521 (cram under test/cram/)
Two project-structure rules:
- E520 flags packages whose library code lives in src/ (the monorepo
convention is lib/, used by 155+ packages). Auto-fix: git mv src lib.
- E521 flags cram tests (.t files or .t directories with run.t) at
test/ rather than test/cram/. Shared driver exes belong in
test/cram/helpers/; shell setup in test/cram/helpers.sh sourced via
(setup_scripts helpers.sh).